diff --git a/www/html/getting-started.html b/www/html/getting-started.html index 6507085..e26f350 100644 --- a/www/html/getting-started.html +++ b/www/html/getting-started.html @@ -1,6 +1,8 @@ <h1>Getting Started</h1> <p> This guide will walk you through the basics of creating a new reference policy module. This will also serve as an introduction to the basics concepts and philosophy of refpolicy. +To install and use a targeted Reference Policy on a Fedora Core 4 system, see the +<a href="index.php?page=switch">switching guide</a>. </p> <h2>Creating A Module</h2> <p> diff --git a/www/html/menu.html b/www/html/menu.html index b29fa1d..4761b65 100644 --- a/www/html/menu.html +++ b/www/html/menu.html @@ -1,9 +1,10 @@ - <a href="index.php">Reference Policy Home</a><br /> - <a href="index.php?page=status">Status/Roadmap</a><br /> - <a href="index.php?page=contributing">Contributing</a><br /> + <a href="index.php">Reference Policy Home</a><br/> + <a href="index.php?page=status">Status/Roadmap</a><br/> + <a href="index.php?page=contributing">Contributing</a><br/> <a href="index.php?page=documentation">Documentation</a><br/> - <a href="index.php?page=getting-started">Getting Started</a><br/> + - <a href="index.php?page=switch">Switch to Reference Policy</a><br/> - <a href="api-docs/">Interface Reference</a><br/> - <a href="index.php?page=download">Download</a><br /> + <a href="index.php?page=download">Download</a><br/> <!--<IMG src="http://sourceforge.net/sflogo.php?group_id=???&type=1" w idth="88" height="31" border="0" alt="SourceForge.net Logo" /></A>--> diff --git a/www/html/switch.html b/www/html/switch.html index b76caf6..43a6013 100644 --- a/www/html/switch.html +++ b/www/html/switch.html @@ -1,4 +1,4 @@ -<h1>Switching to Reference Policy</h1> +<h1>Switching to Targeted Reference Policy</h1> <p> This guide will walk you through switching to the targeted reference policy on a Fedora system. @@ -11,21 +11,34 @@ from Sourceforge. Download the policy, and unpack it to a temporary directory. Then use the install-src make target to install the policy sources. - +</p> +<div id="codeblock"> <pre> -# tar -jxvf refpolicy-20050711.tar.bz2 -C /tmp +# tar -jxvf refpolicy-xxxxxxxx.tar.bz2 -C /tmp # cd /tmp/refpolicy # make install-src </pre> +</div> <h2> Configure the policy </h2> <p> + The policy source is found in the + /etc/selinux/refpolicy/src/policy/ directory. + Use the example targeted modules configuration. +</p> +<div id="codeblock"> +<pre> +# cd /etc/selinux/refpolicy/src/policy +# cp policy/modules.conf.targeted_example policy/modules.conf +</pre> +</div> +<p> Near the top of the policy Makefile, the policy has a few build options. The TYPE needs to be set to targeted, and the DISTRO option needs to be - uncommented, and set to redhat. The Makefile is found in the - /etc/selinux/refpolicy/src/policy/ directory. + uncommented and set to redhat. </p> +<div id="codeblock"> <pre> ######################################## # @@ -65,13 +78,19 @@ MONOLITHIC=y # Uncomment this to disable command echoing #QUIET:=@ </pre> +</div> <h2> - Install the binary policy and application configuration files + Install the policy </h2> +<p> + Next, install the policy, application configuration files, and + file contexts. +</p> +<div id="codeblock"> <pre> -# cd /etc/selinux/refpolicy/src/policy # make install </pre> +</div> <h2> Change SELinux Configuration </h2> @@ -79,6 +98,7 @@ MONOLITHIC=y Modify the /etc/selinux/config file, and set SELINUXTYPE to refpolicy. It should look similar to this: </p> +<div id="codeblock"> <pre> # This file controls the state of SELinux on the system. # SELINUX= can take one of these three values: @@ -91,14 +111,17 @@ SELINUX=enforcing # strict - Full SELinux protection. SELINUXTYPE=<font color=red><b>refpolicy</b></font> </pre> +</div> <h2> - Relabel + Restart and Relabel </h2> <p> The system needs to be restarted with the new policy, and relabeled on booting. </p> +<div id="codeblock"> <pre> # touch /.autorelabel # shutdown -r now </pre> +</div> diff --git a/www/publish.sh b/www/publish.sh index 6c6e541..0280bed 100755 --- a/www/publish.sh +++ b/www/publish.sh @@ -3,4 +3,4 @@ # This will 'publish' the reference policy website. cp ../refpolicy/Changelog html/Changelog.txt -rsync -r . shell.sf.net:/home/groups/s/se/serefpolicy/htdocs +rsync -avr --exclude .svn . shell.sf.net:/home/groups/s/se/serefpolicy/htdocs